ping-mee-self-service-platform/_bmad-output/initiative-ping-mee-portal/deferred-work.md at 003ce6e0c2e4e228f8e93df030b78396b861b613

ebbe.bass/ping-mee-self-service-platform

Files

T

Ebbe BaßandClaude Sonnet 5.5 003ce6e0c2 docs: test-environment runbook and scripts for ticket 1.2

Setup script for the test OU, scoped service account, groups and test users;
an LDAPS check script; and a runbook for the CA file, authentik, Zoraxy and
a test mailbox. Not run against a live directory.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sk72AxLwQnYttF6VFSxQLt

2026-10-15 15:11:14 +02:00

601 B

Raw Blame History

source_plan: _bmad-output/initiative-ping-mee-portal/epic-platform-and-sign-in/story-prepare-the-test-environment-plan.md summary: ARCHITECTURE-SPINE AD-2 says the service account's read rights are limited to a list, but Active Directory gives authenticated users broad read by default, so the statement is not enforced by the test-environment setup. evidence: The setup script grants only write rights and the Change Password right; read access is the default. Either soften AD-2 ("needs no more than this list") or enforce it with deny entries; decide when the architecture is next updated.

601 B Raw Blame History

601 B

Raw Blame History